Need xnba kernel that supports secure boot

[billwaj]

Need to be able to secure boot our xcat RHEL image. This image is created with "genimage" including the tiny xnba initial kernel. When we set the BIOS of the servers under test to enable secure boot, the xcat boot fails because there is no key for the xnba image in the kernel.

There are two types of secure boot image keys:

1. vendor keys - RHEL, Ubuntu, etc register these with Microsoft and these are included by default in BIOS
2. MOKs Machine Owned Keys - these are for custom built images. A key has to be generated by the company who built the image and installed into the BIOS.

As such, we need a MOK for the xnba.efi initial kernel.